Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File: Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier: ZD6tg4Hi42S4X3BZbMtDQ9s3Axwa1b1sA51nSwySuJM=
Subject key identifier: 9C:8E:9A:47:EF:5C:43:0E:A4:DC:95:F3:88:6C:05:E0:C2:E9:C3:6B
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial: 019CE36C4389424CD322C5FDD6EAE6A663E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number: 1868
Signing time: Thu 12 Mar 2026 19:00:49 +0000
Manifest this update: Thu 12 Mar 2026 19:00:49 +0000
Manifest next update: Fri 13 Mar 2026 19:00:49 +0000
Files and hashes: 1: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: DVPhUXyOG75FMzev+rEITMZGyv+Iy3qzLXuuvEy0JdY=)
2: cfc8AqxUQpHiP5l_Nwt2RxlR31E.roa (hash: l4uppHG903ldqi9DaDNBYospFemwSrJP6nlFEmmwSgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6c:43:89:42:4c:d3:22:c5:fd:d6:ea:e6:a6:63:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Validity
Not Before: Mar 12 19:00:49 2026 GMT
Not After : Mar 13 19:00:49 2026 GMT
Subject: CN=9c8e9a47ef5c430ea4dc95f3886c05e0c2e9c36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:6c:3a:3c:38:4d:d5:e8:3a:b9:78:57:56:
c0:c3:96:c6:6c:12:56:14:2a:3d:c6:b1:79:bc:b0:
b2:8e:ff:b8:aa:c1:9f:3a:69:39:66:c6:01:a6:ff:
a8:f0:18:92:4d:18:6d:5e:87:7f:9b:19:b9:dd:0e:
a9:16:ab:c3:0d:67:8d:4b:31:a9:10:ab:e4:41:76:
6d:f0:2a:7e:54:4e:cc:f5:86:3c:b7:1c:9a:49:c4:
e3:54:dc:37:7e:81:ff:30:3b:1d:c3:da:81:b0:3f:
88:3a:22:ed:e4:9a:a8:07:85:1a:bf:37:1a:59:28:
08:16:0d:f7:7f:97:a9:ee:1d:b4:1d:57:02:45:fc:
43:6d:57:17:8d:09:01:ed:6f:b0:5a:e8:5f:85:ea:
76:60:55:e0:11:81:b5:3a:1f:49:15:d4:ce:00:8b:
f1:10:5d:aa:93:f9:26:5c:98:83:e5:7e:ec:b9:e9:
21:da:15:10:d5:fe:d4:4f:1f:bd:e5:d8:e8:87:32:
37:b8:51:e7:c1:19:fc:de:78:8e:73:70:e5:cd:30:
8d:c5:62:3d:41:a0:e4:f5:a8:d3:c3:2a:81:ce:cc:
0d:af:b4:ab:72:eb:ed:39:13:f1:b1:ca:4b:48:c2:
60:46:59:f8:6b:41:d5:fc:6a:02:e8:aa:81:d8:22:
83:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8E:9A:47:EF:5C:43:0E:A4:DC:95:F3:88:6C:05:E0:C2:E9:C3:6B
X509v3 Authority Key Identifier:
keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:76:65:cd:d1:e9:f3:f6:83:81:a9:d4:a0:8d:35:af:fa:b7:
cb:d6:b1:d9:70:67:b5:88:98:af:90:a7:37:3e:ae:a1:a3:31:
c0:d4:7b:36:34:37:03:b8:e1:24:27:09:2b:7b:f8:99:86:48:
eb:0b:05:6c:60:9d:1c:a4:94:01:b7:a3:5b:bd:1a:01:aa:80:
08:2b:47:aa:a1:28:f2:2a:68:bd:13:c1:aa:60:12:0f:2f:f7:
be:9c:7d:3b:5f:d9:4f:d2:61:d6:dd:ad:ed:f3:07:c2:07:0c:
31:22:5b:91:7f:a8:e5:2f:20:29:77:d7:89:c4:d9:9d:d2:dc:
b4:32:14:c9:e8:4d:0b:81:dc:91:4b:70:3c:c0:b7:46:a7:bb:
5b:e2:ea:00:68:59:2f:2d:77:56:4c:1e:22:53:65:73:8f:04:
e0:80:f8:60:61:77:05:2b:8e:44:5e:20:04:ac:25:e0:6b:5d:
45:48:c3:3d:b6:7e:12:a4:20:57:d7:d2:13:66:fb:9e:13:79:
1c:23:d5:48:e8:f3:29:92:50:e6:89:4c:d3:6c:84:f9:12:05:
65:8b:15:d3:f5:be:84:ec:03:93:59:6c:da:eb:60:b7:ea:38:
85:41:14:47:7e:e8:3f:b8:e9:1f:24:dd:1a:95:33:31:e7:99:
a2:3e:7f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjbEOJQkzTIsX91urmpmPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZGYzNzlmYWFmMjEwYTcwMzZkYWMwNWRlNmI1NzcyZGJl
NGRkNmMwHhcNMjYwMzEyMTkwMDQ5WhcNMjYwMzEzMTkwMDQ5WjAzMTEwLwYDVQQD
Eyg5YzhlOWE0N2VmNWM0MzBlYTRkYzk1ZjM4ODZjMDVlMGMyZTljMzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj1sOjw4TdXoOrl4V1bAw5bGbBJW
FCo9xrF5vLCyjv+4qsGfOmk5ZsYBpv+o8BiSTRhtXod/mxm53Q6pFqvDDWeNSzGp
EKvkQXZt8Cp+VE7M9YY8txyaScTjVNw3foH/MDsdw9qBsD+IOiLt5JqoB4Uavzca
WSgIFg33f5ep7h20HVcCRfxDbVcXjQkB7W+wWuhfhep2YFXgEYG1Oh9JFdTOAIvx
EF2qk/kmXJiD5X7suekh2hUQ1f7UTx+95djohzI3uFHnwRn83niOc3DlzTCNxWI9
QaDk9ajTwyqBzswNr7SrcuvtORPxscpLSMJgRln4a0HV/GoC6KqB2CKDpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyOmkfvXEMOpNyV84hsBeDC6cNrMB8GA1UdIwQY
MBaAFGXfN5+q8hCnA22sBd5rV3Lb5N1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgt
MDc2Yzg4Yjg4MDJmLzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgtMDc2Yzg4Yjg4MDJm
LzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXZlzdHp
8/aDganUoI01r/q3y9ax2XBntYiYr5CnNz6uoaMxwNR7NjQ3A7jhJCcJK3v4mYZI
6wsFbGCdHKSUAbejW70aAaqACCtHqqEo8ipovRPBqmASDy/3vpx9O1/ZT9Jh1t2t
7fMHwgcMMSJbkX+o5S8gKXfXicTZndLctDIUyehNC4HckUtwPMC3Rqe7W+LqAGhZ
Ly13VkweIlNlc48E4ID4YGF3BSuORF4gBKwl4GtdRUjDPbZ+EqQgV9fSE2b7nhN5
HCPVSOjzKZJQ5olM02yE+RIFZYsV0/W+hOwDk1ls2utgt+o4hUEUR37oP7jpHyTd
GpUzMeeZoj5/Aw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 02:05:14 2026 by rpki-client